CVE-2026-58955: Input Validation

Q: Which software is identified as affected?

The listed software is android/platform/frameworks/base and Google Android from Google. No affected version range is provided.

Q: Does the reported impact include data disclosure or modification?

The severity vector indicates no confidentiality or integrity impact. The reported impact is high availability impact, consistent with a local denial of service.

Published Nov 1, 2026

Updated

In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

7 affected componentsFixes available

android/platform/frameworks/base>=17-qpr2-next:0<17-qpr2-next:2026-11-01

17-qpr2-next:2026-11-01

android/platform/frameworks/base>=15:0<15:2026-11-01

15:2026-11-01

android/platform/frameworks/base>=16:0<16:2026-11-01

16:2026-11-01

android/platform/frameworks/base>=16-qpr2:0<16-qpr2:2026-11-01

16-qpr2:2026-11-01

android/platform/frameworks/base>=17:0<17:2026-11-01

17:2026-11-01

android/platform/frameworks/base>=14:0<14:2026-11-01

14:2026-11-01

Google Android

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade android/platform/frameworks/base to a version that resolves this vulnerability.
Fixed in 17-qpr2-next:2026-11-01
Upgrade
Upgrade android/platform/frameworks/base to a version that resolves this vulnerability.
Fixed in 15:2026-11-01
Upgrade
Upgrade android/platform/frameworks/base to a version that resolves this vulnerability.
Fixed in 16:2026-11-01
Upgrade
Upgrade android/platform/frameworks/base to a version that resolves this vulnerability.
Fixed in 16-qpr2:2026-11-01
Upgrade
Upgrade android/platform/frameworks/base to a version that resolves this vulnerability.
Fixed in 17:2026-11-01
Upgrade
Upgrade android/platform/frameworks/base to a version that resolves this vulnerability.
Fixed in 14:2026-11-01

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Nov 2, 2026

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

CVE Published

via MITRE·07:54 PM

Data Sourced

via MITRE·07:54 PM

DescriptionWeakness

Data Sourced

via NVD·08:17 PM

Description

Data Sourced

via NVD·08:17 PM

SeverityWeakness

Event

via NVD·08:17 PM

Frequently Asked Questions

Which software is identified as affected?

The listed software is android/platform/frameworks/base and Google Android from Google. No affected version range is provided.

Does the reported impact include data disclosure or modification?

The severity vector indicates no confidentiality or integrity impact. The reported impact is high availability impact, consistent with a local denial of service.

CVE-2026-58955: Input Validation

Affected Software

Remediation

Event History

Frequently Asked Questions

Which software is identified as affected?

Does the reported impact include data disclosure or modification?

Company

Resources

Contact

Frequently Asked Questions

Which software is identified as affected?

Does the reported impact include data disclosure or modification?